CVE-2023-42096

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published May 3, 2024
Updated: May 23, 2024
CWE ID 416

Summary

CVE-2023-42096 is a vulnerability in Foxit PDF Reader that allows remote attackers to execute arbitrary code on affected installations. This vulnerability arises from a flaw in the parsing of PDF files, where the lack of object validation before performing operations leads to code execution within the current process. To exploit this vulnerability, user interaction is required, such as visiting a malicious page or opening a malicious file. The affected products include various versions of Foxit PDF Reader. Organizations should apply the necessary patches or updates provided by Foxit Software to remediate this issue. If left unaddressed, this vulnerability poses a high risk to organizations, as it can allow attackers to take control of systems and potentially compromise sensitive information.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-42096 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options